search cancel

Steps to upgrade TOMCAT to version 4.1.39 to avoid vulnerabilities with the out of box Tomcat version

book

Article ID: 54115

calendar_today

Updated On:

Products

CA Automation Suite for Data Centers - Configuration Automation CA Client Automation - Asset Management CA Client Automation - IT Client Manager CA Client Automation CA Client Automation - Remote Control CA Client Automation - Asset Intelligence CA Client Automation - Desktop Migration Manager CA Client Automation - Patch Manager CA IT Asset Manager CA Software Asset Manager (CA SAM) ASSET PORTFOLIO MGMT- SERVER CA Server Automation CA Service Management - Asset Portfolio Management CA Service Management - Service Desk Manager

Issue/Introduction

Description:

Tomcat needs to be at version 4.1.39 to avoid multiple vulnerabilities which are present in the out-of-box version of Tomcat which comes with DSM/UPM R11.2.

Solution:

The following procedure outlines the steps to update and integrate tomcat 4.1.39 to work with UPM/WAC.

Please review and change the PATH appropriately for ALL the below commands:

  • Unzip Tomcat 4.1.39 (downloaded zip file) into the above directory
  • Due to the fact that the zip file for Tomcat 4.1.39 contains a directory at the top called "apache-tomcat-4.1.39" and we need all of the directories beneath this to be directly under "C:\Program Files\CA\SC\Tomcat\4.1.39", copy everything under the "apache-tomcat-4.1.39" to the directory mentioned above and then delete the " apache-tomcat-4.1.39" directory.
  • Rename the directory "C:\Program Files\CA\SC\Tomcat\4.1.31" to something else.
  • Open command prompt and run the following commands to integrate tomcat 4.1.39 with CAF.
    • Caf stop tomcat

    • ccnfcmda -cmd SetParameterValue -ps itrm/common/caf/plugins/tomcat -pn commandline_start -v "\"C:\Program Files\CA\SC\JRE\1.4.2_06\bin\java.exe\" -Xrs -Dfile.encoding=utf8 -Xms128m -Xmx256m -XX:MaxPermSize=256m -Djava.endorsed.dirs=\"C:\Program Files\CA\SC\Tomcat\4.1.39\common\endorsed;C:\Program Files\CA\DSM\SQLJDBC\1.0\enu\;\" -classpath \"C:\Program Files\CA\SC\JRE\1.4.2_06\lib\tools.jar;C:\Program Files\CA\SC\Tomcat\4.1.39\bin\bootstrap.jar\" -Dcatalina.base=\"C:\Program Files\CA\DSM\Web Console\" -Dcatalina.home=\"C:\Program Files\CA\SC\Tomcat\4.1.39\" -Djava.io.tmpdir=\"C:\Program Files\CA\DSM\Web Console\temp\" org.apache.catalina.startup.Bootstrap start"

    • ccnfcmda -cmd SetParameterValue -ps itrm/common/caf/plugins/tomcat -pn commandline_stop -v "\"C:\Program Files\CA\SC\JRE\1.4.2_06\bin\java.exe\" -Xrs -Dfile.encoding=utf8 -Djava.endorsed.dirs=\"C:\Program Files\CA\SC\Tomcat\4.1.39\common\endorsed;C:\Program Files\CA\DSM\SQLJDBC\1.0\enu\;\" -classpath \"C:\Program Files\CA\SC\JRE\1.4.2_06\lib\tools.jar;C:\Program Files\CA\SC\Tomcat\4.1.39\bin\bootstrap.jar\" -Dcatalina.base=\"C:\Program Files\CA\DSM\Web Console\" -Dcatalina.home=\"C:\Program Files\CA\SC\Tomcat\4.1.39\" -Djava.io.tmpdir=\"C:\Program Files\CA\DSM\Web Console\temp\" org.apache.catalina.startup.Bootstrap stop\"

    • caf start tomcat

Environment

Release: UASIT.99000-11.2-Asset Intelligence
Component: